Skip to content

Conversation

@aschumann-virtualcable
Copy link
Contributor

This pull request updates how RDP sessions are launched on macOS, specifically for Thincast and xfreerdp clients. The main improvement is that passwords are now passed as command-line arguments instead of being written to the RDP file, enhancing security by avoiding plaintext password storage. The changes also ensure that passwords are only included when provided.

Security and Launch Parameter Improvements:

  • Stopped writing the RDP password directly into the .rdp file; instead, the password is now appended as a command-line argument (/p:<password>) when launching Thincast, improving security and avoiding plaintext password storage. [1] [2]
  • For both Thincast and xfreerdp, the logic now checks if a password is present and only adds the /p:<password> argument when necessary. If no password is provided, this is logged for debugging purposes. [1] [2] [3]

Signature Updates:

  • Updated the .signature files for both direct.py and tunnel.py to reflect the code changes. [1] [2]

Updates the logic for launching Thincast to pass the password
as a command-line argument instead of writing it unencrypted
to the RDP file. Improves security by avoiding plaintext
password storage and ensures compatibility with Thincast's
CLI options. Adjusts debug logging accordingly.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants